Vulnerability-Lookup

Search criteria

Vendor

Product

Assigner (CNA or root)

Sources

Sort by

Order

CVSS min

CVSS max

Apply ordering (override relevance)

BREW-CLOUDISCOVERY-CVE-2… (PYSEC-2026-4013)

Vulnerability from osv_homebrew – Published: 2026-09-30 21:05 – Updated: 2026-09-30 21:05 – Source website

Summary

virtualenv bash and fish activation scripts execute commands embedded in paths

Details

The generated activate (bash/zsh) and activate.fish scripts interpolate a shlex.quote-ed value into a position that quotes it a second time. The extra quotes terminate the quoted run early and leave part of the value parsed as shell code, so a path containing shell metacharacters runs commands when a user sources the activation script.

activate is affected through the virtual environment's own path, on the branch that reports a relocated environment (Virtual environment directory __VIRTUAL_ENV__ does not exist!). For a destination named x'$(id)'y, shlex.quote emits 'x'"'"'$(id)'"'"'y'; the inner " closes the enclosing double quote and $(id) is left unquoted. This branch runs whenever the recorded path is absent, which is the normal case for a virtual environment copied or distributed to another machine.

activate.fish is affected through the interpreter's Tcl/Tk library paths (set -gx TCL_LIBRARY '__TCL_LIBRARY__'). The rendered line becomes ''/tcl/(cmd)/lib'', and fish expands the (cmd) left between the adjacent quoted runs. The same doubling splits a path containing a space into two list elements, corrupting TCL_LIBRARY and TK_LIBRARY.

This is the same defect class as GHSA-x78j-v8h9-3j2q, which covered activate.bat.

Fixed in 21.7.13 by moving the placeholders outside the surrounding quotes, so each value keeps only the quoting shlex.quote applied.

Severity

7.8 (High)


                    
                      CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

References

URL

Type

	https://github.com/pypa/virtualenv/security/advis…	WEB
	https://github.com/pypa/virtualenv/pull/3252	WEB
	https://github.com/pypa/virtualenv/commit/4d5a105…	FIX
	https://github.com/pypa/virtualenv/releases/tag/21.7.13	WEB
	https://github.com/pypa/virtualenv	PACKAGE
	https://pypi.org/project/virtualenv	PACKAGE

JSON

To clipboard

{
  "affected": [
    {
      "ecosystem_specific": {
        "fix": null,
        "range_state": "affected",
        "resource": "virtualenv",
        "resource_purl": "pkg:pypi/virtualenv@20.31.2",
        "upstream_fixed_in": "21.7.13"
      },
      "package": {
        "ecosystem": "Homebrew",
        "name": "cloudiscovery",
        "purl": "pkg:brew/cloudiscovery"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "2.4.4_4"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    }
  ],
  "database_specific": {
    "confidence": "high",
    "source": "matched",
    "strategy": "registry",
    "upstream_evidence": [
      {
        "ecosystem": "PyPI",
        "key": "pkg:pypi/virtualenv@20.31.2",
        "name": "virtualenv",
        "resource": "virtualenv",
        "strategy": "registry",
        "subject_version": "20.31.2"
      }
    ]
  },
  "details": "The generated `activate` (bash/zsh) and `activate.fish` scripts interpolate a\n`shlex.quote`-ed value into a position that quotes it a second time. The extra\nquotes terminate the quoted run early and leave part of the value parsed as\nshell code, so a path containing shell metacharacters runs commands when a user\nsources the activation script.\n\n`activate` is affected through the virtual environment\u0027s own path, on the branch\nthat reports a relocated environment (`Virtual environment directory\n__VIRTUAL_ENV__ does not exist!`). For a destination named `x\u0027$(id)\u0027y`,\n`shlex.quote` emits `\u0027x\u0027\"\u0027\"\u0027$(id)\u0027\"\u0027\"\u0027y\u0027`; the inner `\"` closes the enclosing\ndouble quote and `$(id)` is left unquoted. This branch runs whenever the\nrecorded path is absent, which is the normal case for a virtual environment\ncopied or distributed to another machine.\n\n`activate.fish` is affected through the interpreter\u0027s Tcl/Tk library paths\n(`set -gx TCL_LIBRARY \u0027__TCL_LIBRARY__\u0027`). The rendered line becomes\n`\u0027\u0027/tcl/(cmd)/lib\u0027\u0027`, and fish expands the `(cmd)` left between the adjacent\nquoted runs. The same doubling splits a path containing a space into two list\nelements, corrupting `TCL_LIBRARY` and `TK_LIBRARY`.\n\nThis is the same defect class as GHSA-x78j-v8h9-3j2q, which covered\n`activate.bat`.\n\nFixed in 21.7.13 by moving the placeholders outside the surrounding quotes, so\neach value keeps only the quoting `shlex.quote` applied.\n",
  "id": "BREW-cloudiscovery-CVE-2026-102925",
  "modified": "2026-09-30T21:05:15Z",
  "published": "2026-09-30T21:05:15Z",
  "references": [
    {
      "type": "WEB",
      "url": "https://github.com/pypa/virtualenv/security/advisories/GHSA-p58f-9548-mpm2"
    },
    {
      "type": "WEB",
      "url": "https://github.com/pypa/virtualenv/pull/3252"
    },
    {
      "type": "FIX",
      "url": "https://github.com/pypa/virtualenv/commit/4d5a105ec2a2723b8c7f4571bb68f4f71d01e3f6"
    },
    {
      "type": "WEB",
      "url": "https://github.com/pypa/virtualenv/releases/tag/21.7.13"
    },
    {
      "type": "PACKAGE",
      "url": "https://github.com/pypa/virtualenv"
    },
    {
      "type": "PACKAGE",
      "url": "https://pypi.org/project/virtualenv"
    }
  ],
  "schema_version": "1.7.3",
  "severity": [
    {
      "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
      "type": "CVSS_V3"
    }
  ],
  "summary": "virtualenv bash and fish activation scripts execute commands embedded in paths",
  "upstream": [
    "PYSEC-2026-4013",
    "CVE-2026-102925",
    "GHSA-p58f-9548-mpm2"
  ]
}

CVE-2026-102925 (GCVE-0-2026-102925)

Vulnerability from cvelistv5 – Published: 2026-09-29 20:50 – Updated: 2026-09-30 19:25

Title

virtualenv bash and fish activation scripts execute commands embedded in paths

Summary

virtualenv is a tool for creating isolated virtual python environments. Prior to 21.7.13, the generated activate (bash and zsh) and activate.fish scripts place values already escaped by shlex.quote inside an additional quoted context. In the bash and zsh script, a crafted virtual environment path reaches __VIRTUAL_ENV__ when a relocated environment's recorded directory is absent; in the fish script, crafted Tcl or Tk library paths reach __TCL_LIBRARY__ or __TK_LIBRARY__. The surplus quotes can terminate the data-only quoted run and leave shell metacharacters parsed as commands when a user sources the activation script, allowing code execution with that user's privileges. This issue is fixed in version 21.7.13.

Severity

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-09-30 19:24 UTC

CWE

CWE-78 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Assigner

GitHub_M mitre root Scorecard

References

4 references

URL	Tags
https://github.com/pypa/virtualenv/security/advis…	x_refsource_CONFIRM
https://github.com/pypa/virtualenv/pull/3252	x_refsource_MISC
https://github.com/pypa/virtualenv/commit/4d5a105…	x_refsource_MISC
https://github.com/pypa/virtualenv/releases/tag/21.7.13	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version
pypa	virtualenv	Affected: < 21.7.13

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-102925",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-09-30T19:24:23.430338Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-09-30T19:25:16.653Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "virtualenv",
          "vendor": "pypa",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c 21.7.13"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "virtualenv is a tool for creating isolated virtual python environments. Prior to 21.7.13, the generated activate (bash and zsh) and activate.fish scripts place values already escaped by shlex.quote inside an additional quoted context. In the bash and zsh script, a crafted virtual environment path reaches __VIRTUAL_ENV__ when a relocated environment\u0027s recorded directory is absent; in the fish script, crafted Tcl or Tk library paths reach __TCL_LIBRARY__ or __TK_LIBRARY__. The surplus quotes can terminate the data-only quoted run and leave shell metacharacters parsed as commands when a user sources the activation script, allowing code execution with that user\u0027s privileges. This issue is fixed in version 21.7.13."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-78",
              "description": "CWE-78: Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-29T20:50:57.199Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/pypa/virtualenv/security/advisories/GHSA-p58f-9548-mpm2",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/pypa/virtualenv/security/advisories/GHSA-p58f-9548-mpm2"
        },
        {
          "name": "https://github.com/pypa/virtualenv/pull/3252",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/pypa/virtualenv/pull/3252"
        },
        {
          "name": "https://github.com/pypa/virtualenv/commit/4d5a105ec2a2723b8c7f4571bb68f4f71d01e3f6",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/pypa/virtualenv/commit/4d5a105ec2a2723b8c7f4571bb68f4f71d01e3f6"
        },
        {
          "name": "https://github.com/pypa/virtualenv/releases/tag/21.7.13",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/pypa/virtualenv/releases/tag/21.7.13"
        }
      ],
      "source": {
        "advisory": "GHSA-p58f-9548-mpm2",
        "discovery": "UNKNOWN"
      },
      "title": "virtualenv bash and fish activation scripts execute commands embedded in paths"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-102925",
    "datePublished": "2026-09-29T20:50:57.199Z",
    "dateReserved": "2026-09-29T20:24:43.339Z",
    "dateUpdated": "2026-09-30T19:25:16.653Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

PYSEC-2026-4013

Vulnerability from pysec - Published: 2026-09-18 04:37 - Updated: 2026-09-30 16:13

Details

The generated activate (bash/zsh) and activate.fish scripts interpolate a shlex.quote-ed value into a position that quotes it a second time. The extra quotes terminate the quoted run early and leave part of the value parsed as shell code, so a path containing shell metacharacters runs commands when a user sources the activation script.

activate is affected through the virtual environment's own path, on the branch that reports a relocated environment (Virtual environment directory __VIRTUAL_ENV__ does not exist!). For a destination named x'$(id)'y, shlex.quote emits 'x'"'"'$(id)'"'"'y'; the inner " closes the enclosing double quote and $(id) is left unquoted. This branch runs whenever the recorded path is absent, which is the normal case for a virtual environment copied or distributed to another machine.

activate.fish is affected through the interpreter's Tcl/Tk library paths (set -gx TCL_LIBRARY '__TCL_LIBRARY__'). The rendered line becomes ''/tcl/(cmd)/lib'', and fish expands the (cmd) left between the adjacent quoted runs. The same doubling splits a path containing a space into two list elements, corrupting TCL_LIBRARY and TK_LIBRARY.

This is the same defect class as GHSA-x78j-v8h9-3j2q, which covered activate.bat.

Fixed in 21.7.13 by moving the placeholders outside the surrounding quotes, so each value keeps only the quoting shlex.quote applied.

Severity

7.8 (High)


                  
                    CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Impacted products

Name	purl
virtualenv	pkg:pypi/virtualenv

Aliases

JSON

To clipboard

{
  "affected": [
    {
      "package": {
        "ecosystem": "PyPI",
        "name": "virtualenv",
        "purl": "pkg:pypi/virtualenv"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "21.7.13"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "0.8",
        "0.8.1",
        "0.8.2",
        "0.8.3",
        "0.8.4",
        "0.9",
        "0.9.1",
        "0.9.2",
        "1.0",
        "1.1",
        "1.10",
        "1.10.1",
        "1.11",
        "1.11.1",
        "1.11.2",
        "1.11.3",
        "1.11.4",
        "1.11.5",
        "1.11.6",
        "1.2",
        "1.3",
        "1.3.1",
        "1.3.2",
        "1.3.3",
        "1.3.4",
        "1.4",
        "1.4.1",
        "1.4.2",
        "1.4.3",
        "1.4.4",
        "1.4.5",
        "1.4.6",
        "1.4.7",
        "1.4.8",
        "1.4.9",
        "1.4rc1",
        "1.5",
        "1.5.1",
        "1.5.2",
        "1.6",
        "1.6.1",
        "1.6.2",
        "1.6.3",
        "1.6.4",
        "1.7",
        "1.7.1",
        "1.7.1.1",
        "1.7.1.2",
        "1.7.2",
        "1.8",
        "1.8.1",
        "1.8.2",
        "1.8.3",
        "1.8.4",
        "1.9",
        "1.9.1",
        "12.0",
        "12.0.1",
        "12.0.2",
        "12.0.4",
        "12.0.5",
        "12.0.6",
        "12.0.7",
        "12.1.0",
        "12.1.1",
        "13.0.0",
        "13.0.1",
        "13.0.2",
        "13.0.3",
        "13.1.0",
        "13.1.1",
        "13.1.2",
        "14.0.0",
        "14.0.1",
        "14.0.2",
        "14.0.3",
        "14.0.4",
        "14.0.5",
        "14.0.6",
        "15.0.0",
        "15.0.1",
        "15.0.2",
        "15.0.3",
        "15.1.0",
        "15.2.0",
        "16.0.0",
        "16.1.0",
        "16.2.0",
        "16.3.0",
        "16.3.1.dev0",
        "16.4.0",
        "16.4.1",
        "16.4.3",
        "16.4.4.dev0",
        "16.5.0",
        "16.6.0",
        "16.6.1",
        "16.6.2",
        "16.7.0",
        "16.7.1",
        "16.7.10",
        "16.7.11",
        "16.7.12",
        "16.7.2",
        "16.7.3",
        "16.7.4",
        "16.7.5",
        "16.7.6",
        "16.7.7",
        "16.7.8",
        "16.7.9",
        "20.0.0",
        "20.0.0b1",
        "20.0.0b2",
        "20.0.1",
        "20.0.10",
        "20.0.11",
        "20.0.12",
        "20.0.13",
        "20.0.14",
        "20.0.15",
        "20.0.16",
        "20.0.17",
        "20.0.18",
        "20.0.19",
        "20.0.2",
        "20.0.20",
        "20.0.21",
        "20.0.22",
        "20.0.23",
        "20.0.24",
        "20.0.25",
        "20.0.26",
        "20.0.27",
        "20.0.28",
        "20.0.29",
        "20.0.3",
        "20.0.30",
        "20.0.31",
        "20.0.32",
        "20.0.33",
        "20.0.34",
        "20.0.35",
        "20.0.4",
        "20.0.5",
        "20.0.6",
        "20.0.7",
        "20.0.8",
        "20.0.9",
        "20.1.0",
        "20.10.0",
        "20.11.0",
        "20.11.1",
        "20.11.2",
        "20.12.0",
        "20.12.1",
        "20.13.0",
        "20.13.1",
        "20.13.2",
        "20.13.3",
        "20.13.4",
        "20.14.0",
        "20.14.1",
        "20.15.0",
        "20.15.1",
        "20.16.0",
        "20.16.1",
        "20.16.2",
        "20.16.3",
        "20.16.4",
        "20.16.5",
        "20.16.6",
        "20.16.7",
        "20.17.0",
        "20.17.1",
        "20.18.0",
        "20.19.0",
        "20.2.0",
        "20.2.1",
        "20.2.2",
        "20.20.0",
        "20.21.0",
        "20.21.1",
        "20.22.0",
        "20.23.0",
        "20.23.1",
        "20.24.0",
        "20.24.1",
        "20.24.2",
        "20.24.3",
        "20.24.4",
        "20.24.5",
        "20.24.6",
        "20.24.7",
        "20.25.0",
        "20.25.1",
        "20.25.2",
        "20.25.3",
        "20.26.0",
        "20.26.1",
        "20.26.2",
        "20.26.3",
        "20.26.4",
        "20.26.5",
        "20.26.6",
        "20.27.0",
        "20.27.1",
        "20.28.0",
        "20.28.1",
        "20.29.0",
        "20.29.1",
        "20.29.2",
        "20.29.3",
        "20.3.0",
        "20.3.1",
        "20.30.0",
        "20.31.0",
        "20.31.1",
        "20.31.2",
        "20.32.0",
        "20.33.0",
        "20.33.1",
        "20.34.0",
        "20.35.0",
        "20.35.1",
        "20.35.2",
        "20.35.3",
        "20.35.4",
        "20.36.0",
        "20.36.1",
        "20.38.0",
        "20.39.0",
        "20.39.1",
        "20.4.0",
        "20.4.1",
        "20.4.2",
        "20.4.3",
        "20.4.4",
        "20.4.5",
        "20.4.6",
        "20.4.7",
        "20.5.0",
        "20.6.0",
        "20.7.0",
        "20.7.1",
        "20.7.2",
        "20.8.0",
        "20.8.1",
        "20.9.0",
        "21.0.0",
        "21.1.0",
        "21.2.0",
        "21.2.1",
        "21.2.2",
        "21.2.3",
        "21.2.4",
        "21.3.0",
        "21.3.1",
        "21.3.2",
        "21.3.3",
        "21.4.0",
        "21.4.1",
        "21.4.2",
        "21.4.3",
        "21.5.0",
        "21.5.1",
        "21.5.2",
        "21.6.0",
        "21.6.1",
        "21.7.0",
        "21.7.1",
        "21.7.10",
        "21.7.11",
        "21.7.12",
        "21.7.2",
        "21.7.3",
        "21.7.4",
        "21.7.5",
        "21.7.6",
        "21.7.7",
        "21.7.8",
        "21.7.9"
      ]
    }
  ],
  "aliases": [
    "CVE-2026-102925",
    "GHSA-p58f-9548-mpm2"
  ],
  "credits": [
    {
      "name": "Bern\u00e1t G\u00e1bor",
      "type": "FINDER"
    }
  ],
  "details": "The generated `activate` (bash/zsh) and `activate.fish` scripts interpolate a\n`shlex.quote`-ed value into a position that quotes it a second time. The extra\nquotes terminate the quoted run early and leave part of the value parsed as\nshell code, so a path containing shell metacharacters runs commands when a user\nsources the activation script.\n\n`activate` is affected through the virtual environment\u0027s own path, on the branch\nthat reports a relocated environment (`Virtual environment directory\n__VIRTUAL_ENV__ does not exist!`). For a destination named `x\u0027$(id)\u0027y`,\n`shlex.quote` emits `\u0027x\u0027\"\u0027\"\u0027$(id)\u0027\"\u0027\"\u0027y\u0027`; the inner `\"` closes the enclosing\ndouble quote and `$(id)` is left unquoted. This branch runs whenever the\nrecorded path is absent, which is the normal case for a virtual environment\ncopied or distributed to another machine.\n\n`activate.fish` is affected through the interpreter\u0027s Tcl/Tk library paths\n(`set -gx TCL_LIBRARY \u0027__TCL_LIBRARY__\u0027`). The rendered line becomes\n`\u0027\u0027/tcl/(cmd)/lib\u0027\u0027`, and fish expands the `(cmd)` left between the adjacent\nquoted runs. The same doubling splits a path containing a space into two list\nelements, corrupting `TCL_LIBRARY` and `TK_LIBRARY`.\n\nThis is the same defect class as GHSA-x78j-v8h9-3j2q, which covered\n`activate.bat`.\n\nFixed in 21.7.13 by moving the placeholders outside the surrounding quotes, so\neach value keeps only the quoting `shlex.quote` applied.\n",
  "id": "PYSEC-2026-4013",
  "modified": "2026-09-30T16:13:20.520407Z",
  "published": "2026-09-18T04:37:14Z",
  "references": [
    {
      "type": "WEB",
      "url": "https://github.com/pypa/virtualenv/security/advisories/GHSA-p58f-9548-mpm2"
    },
    {
      "type": "WEB",
      "url": "https://github.com/pypa/virtualenv/pull/3252"
    },
    {
      "type": "FIX",
      "url": "https://github.com/pypa/virtualenv/commit/4d5a105ec2a2723b8c7f4571bb68f4f71d01e3f6"
    },
    {
      "type": "WEB",
      "url": "https://github.com/pypa/virtualenv/releases/tag/21.7.13"
    },
    {
      "type": "PACKAGE",
      "url": "https://github.com/pypa/virtualenv"
    },
    {
      "type": "PACKAGE",
      "url": "https://pypi.org/project/virtualenv"
    }
  ],
  "severity": [
    {
      "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
      "type": "CVSS_V3"
    }
  ],
  "summary": "virtualenv bash and fish activation scripts execute commands embedded in paths"
}

Find a vulnerability

Search criteria

Related vulnerabilities

BREW-CLOUDISCOVERY-CVE-2… (PYSEC-2026-4013)

CVE-2026-102925 (GCVE-0-2026-102925)

PYSEC-2026-4013